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CLAIMS 

What is claimed is: 



1 1 . A method of managing a lifecycle of an electronic contract representing 

2 a relationship between at least two parties sharing a business process 

3 comprising: 

4 exchanging public keys for each of the parties; 

5 negotiating the electronic contract; 

6 digitally signing and verifying the electronic contract; 

7 issuing role certificates to participants of the shared business process, the 

8 role certificates defining authorization of participants to perform at least a part of 

9 the shared business process and for using the public keys; 

1 0 registering, by the participants, to receive the electronic contract; 

1 1 distributing the electronic contract to the participants; and 

1 2 performing the shared business process by the participants. 
13 

1 2. The method of claim 1 , further comprising updating the shared 

2 business process by modifying the electronic contract and redistributing the 

3 electronic contract to the participants. 
4 

1 3. The method of claim 1 , further comprising exchanging key fingerprints 

2 between the parties and using the key fingerprints in verifying the electronic 

3 contract. 
4 

1 4. The method of claim 1 , wherein negotiating the electronic contract 

2 comprises determining terms and conditions of the electronic contract and 

3 defining allowable roles for participants and process elements. 
4 

1 5. The method of claim 1 , further comprising storing the electronic 

2 contract by an archive agent prior to distributing the electronic contract and 
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3 wherein registering to receive the electronic contract comprises registering with a 

4 purchase/subscribe agent to receive the electronic contract by the participants. 
5 

1 6. The method of claim 1 , wherein the electronic contract is distributed to 

2 the participants according to a publish and subscribe model. 
3 

1 7. The method of claim 1 , further comprising terminating the electronic 

2 contract by modifying the electronic contract to halt authorization of the shared 

3 business process. 
4 

1 8. The method of claim 1 , wherein digitally signing and verifying the 

2 electronic contract comprises cross-checking each other's digital signatures on 
O 3 the electronic contract by the parties, without involving a trusted third party. 

CJ 4 

% 1 9. An article comprising: a storage medium having a plurality of machine 

|3 2 readable instructions, wherein when the instructions are executed by a 

3 processor, the instructions provide for managing a lifecycle of an electronic 
^ 4 contract representing a relationship between at least two parties sharing a 

fy 5 business process by exchanging public keys for each of the parties, negotiating 

fp 6 the electronic contract, digitally signing and verifying the electronic contract, 

Q 7 issuing role certificates to participants of the shared business process, the role 

8 certificates defining authorization of participants to perform at least a part of the 

9 shared business process and for using the public keys, registering, by the 

10 participants, to receive the electronic contract, distributing the electronic contract 

1 1 to the participants, and performing the shared business process by the 

12 participants. 
13 

1 1 0. The article of claim 9, further comprising instructions for updating the 

2 shared business process by modifying the electronic contract and redistributing 

3 the electronic contract to the participants. 
4 
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1 11. The article of claim 9, further comprising exchanging key fingerprints 

2 between the parties and using the key fingerprints in verifying the electronic 

3 contract. 
4 

1 12. The article of claim 9, wherein negotiating the electronic contract 

2 comprises determining terms and conditions of the electronic contract and 

3 defining allowable roles for participants and process elements. 
4 

1 13. The article of claim 9, further comprising instructions for storing the 

2 electronic contract by an archive agent prior to distributing the electronic contract 

3 and wherein instructions for registering to receive the electronic contract 

4 comprise instructions for registering with a purchase/subscribe agent to receive 

0 5 the electronic contract by the participants. 
SI 6 

W i 14. The article of claim 9, wherein the electronic contract is distributed to 

fl 2 the participants according to a publish and subscribe model. 

1 3 

!L 1 15. The article of claim 9, further comprising instructions for terminating 

rU 2 the electronic contract by modifying the electronic contract to halt authorization of 

J 3 the shared business process. 

O 4 

1 1 6. The article of claim 9, wherein instructions for digitally signing and 

2 verifying the electronic contract comprise instructions for cross-checking each 

3 other's digital signatures on the electronic contract by the parties, without 

4 involving a trusted third party. 
5 

1 17. A system for managing a lifecycle of an electronic contract 

2 comprising: 

3 at least two parties to share a business process represented by the 

4 electronic contract, each of parties comprising at least one participant for 

5 performing an element of the shared business process, each of the parties 
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6 exchanging public keys associated with the electronic contract, negotiating the 

7 Electronic contract, and digitally signing and verifying the electronic contract; 

8 an archive agent coupled to the parties to store the signed and verified 

9 electronic contract; and 

1 0 a purchase/subscribe agent coupled to the archive agent and the parties 

1 1 to receive registrations from the participants and to distribute the signed and 

1 2 verified electronic contract to the participants. 
13 

1 18. The system of claim 17, wherein no dominant authority and no 

2 hierarchy of parties exists in the system. 
3 

1 19. The system of claim 17, wherein the at least two parties enforce 

C 2 authorization of participants to perform elements of the shared business process 

\i 3 without use of a trusted third party. 

1 4 

£0 1 20. The system of claim 17, further comprising a role certificate for 

2 presentation by a first participant of a first party to a second participant of a 

L 3 second party to verify, according to trust rules defined in the electronic contract, 

fy 4 that the first participant is authorized to perform at least part of the shared 

ir s 5 business process. 
O 6 

|s4 



1 21 . The system of claim 17, wherein the parties cross-check each other's 

2 digital signatures on the electronic contract. 
3 

1 22. The system of claim 17, wherein the parties exchange key 

2 fingerprints between the parties. 
3 

1 23. The system of claim 17, wherein the parties determine terms and 

2 conditions of the electronic contract and define allowable roles for participants 

3 and process elements. 
1 



31 



